PT-2019-14517 · Bludit · Bludit

Christasao · Published 2019-09-08 · Updated 2022-04-26 · CVE-2019-16113

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Bludit version 3.9.2

Description The issue allows remote code execution via the "bl-kernel/ajax/upload-images.php" endpoint. This is possible because PHP code can be entered with a .jpg file name, and then this PHP code can write other PHP code to a ../ pathname.

Recommendations For Bludit version 3.9.2, as a temporary workaround, consider restricting access to the "bl-kernel/ajax/upload-images.php" endpoint until a patch is available. Avoid allowing users to upload files with PHP code, especially with .jpg file names, to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2019-16113

Affected Products

Bludit

References · 16

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/bludit_upload_images_exec.rb · Exploit
• 🔥 https://github.com/bludit/bludit/issues/1081 · Exploit
• 🔥 https://github.com/cybervaca/CVE-2019-16113 · Exploit
• 🔥 https://github.com/ynots0ups/CVE-2019-16113 · Exploit
• 🔥 https://github.com/0xConstant/CVE-2019-16113 · Exploit
• 🔥 https://github.com/banomaly/CVE-2019-16113 · Exploit
• 🔥 https://github.com/hg8/CVE-2019-16113-PoC · Exploit
• 🔥 http://packetstormsecurity.com/files/158569/Bludit-3.9.2-Directory-Traversal.html · Exploit
• 🔥 http://packetstormsecurity.com/files/155295/Bludit-Directory-Traversal-Image-File-Upload.html · Exploit
• 🔥 https://exploit-db.com/exploits/48568 · Exploit
• 🔥 https://exploit-db.com/exploits/47699 · Exploit
• 🔥 https://exploit-db.com/exploits/48701 · Exploit
• 🔥 http://packetstormsecurity.com/files/157988/Bludit-3.9.12-Directory-Traversal.html · Exploit
• https://osv.dev/vulnerability/CVE-2019-16113 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-16113 · Security Note